« Back to list

CVE-2016-0496

Status: ModifiedMedium (4.3)—

Unspecified vulnerability in the MICROS CWDirect component in Oracle Retail Applications 12.5, 13.0, 14.0, 15.0, 16.0, 17.0, and 18.0 allows remote attackers to affect confidentiality via unknown vectors related to Order Entry.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

Oracle — Micros Cwdirect

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2016-0496",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert_us@oracle.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2016-01-21T03:00:44.510",
  "references": [
    {
      "url": "http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1034718",
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1034718",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in the MICROS CWDirect component in Oracle Retail Applications 12.5, 13.0, 14.0, 15.0, 16.0, 17.0, and 18.0 allows remote attackers to affect confidentiality via unknown vectors related to Order Entry."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en el componente MICROS CWDirect en Oracle Retail Applications 12.5, 13.0, 14.0, 15.0, 16.0, 17.0 y 18.0 permite a atacantes remotos afectar a la confidencialidad a través de vectores desconocidos relacionados con Order Entry."
    }
  ],
  "lastModified": "2026-06-17T00:37:38.737",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:oracle:micros_cwdirect:12.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "644005DF-E255-4343-8E62-8234A3D46EE0"
            },
            {
              "criteria": "cpe:2.3:a:oracle:micros_cwdirect:13.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EFAF6A89-30DC-4E72-BEE5-8FF7636E235C"
            },
            {
              "criteria": "cpe:2.3:a:oracle:micros_cwdirect:14.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B973876F-4B11-4D8D-9DFC-1807354DE129"
            },
            {
              "criteria": "cpe:2.3:a:oracle:micros_cwdirect:15.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "37C153BC-1529-4F2D-9562-DA432834328C"
            },
            {
              "criteria": "cpe:2.3:a:oracle:micros_cwdirect:16.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "774E174A-B70D-4813-BE7D-01F74D2D9EA1"
            },
            {
              "criteria": "cpe:2.3:a:oracle:micros_cwdirect:17.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "27ECCF19-A9E9-4D98-973F-929F282C6688"
            },
            {
              "criteria": "cpe:2.3:a:oracle:micros_cwdirect:18.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9FF6BD6E-D3AA-4A30-8106-EA559CA28608"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert_us@oracle.com"
}